CVE-2017-12801

The CVE-2017-12801 issue affects libebml2 (UpdateDataSize in ebmlmaster.c) and is triggered by processing crafted MKV files. The vulnerability allows remote attackers to cause a denial-of-service, producing an assertion fault. Technical details from connected records show the flaw exists in libeb...

CVE-2017-12802

CVE-2017-12802 concerns the EBML_IntegerValue function in libebml2’s ebmlnumber.c. The vulnerability affects versions up to 2012-08-26 and allows remote attackers to cause a denial of service (assert fault) via a specially crafted MKV file. No exploit/vector details are provided in the connected ...

CVE-2017-12802

The EBMLIntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

CVE-2017-12779

The NodeGetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service Null pointer dereference and application crash via a crafted mkv file...

CVE-2017-12783

The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

CVE-2017-12781

The EBMLBufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service Null pointer dereference and application crash via a crafted mkv file...

CVE-2017-12780

CVE-2017-12780 affects the ReadData function in ebmlstring.c of Libebml2 (up to 2012-08-26). A crafted MKV file can trigger an invalid free and crash the application, resulting in a denial of service. Connected sources corroborate this issue across multiple databases and mirror the same descripti...

CVE-2017-12783

CVE-2017-12783 affects libebml2 (ReadDataFloat in ebmlnumber.c) up to version 2012-08-26. A crafted MKV file can trigger a denial-of-service (assert fault) remotely. The connected records confirm the vulnerable component and impact; no remediation details are provided in the supplied documents.

CVE-2017-12803

The CVE-2017-12803 issue affects mkclean 0.8.9, specifically the Node_ValidatePtr function in corec/corec/node/node.c. A crafted MKV file can trigger a remote denial of service (assert fault). Documents consistently describe the vulnerability without detailing a fixed version or patch availabilit...

CVE-2017-12801

The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

CVE-2017-12781

CVE-2017-12781 concerns the libebml2 parser. The vulnerability resides in the EBML_BufferToID function in ebmlelement.c, affecting libebml2 up to and including versions released before 2012-08-26. A crafted MKV file can trigger a denial of service via a NULL pointer dereference, potentially crash...

CVE-2017-12782

The CVE-2017-12782 entry concerns the ReadData function in ebmlmaster.c within libebml2 up to 2012-08-26, where a crafted MKV file can trigger a remote denial of service (assert fault). The connected documents confirm the vulnerable component and file, and describe the impact as a denial of servi...

libebml2 UpdateDataSize function denial of service vulnerability

libebml2 is a mkv file parsing library for analyzing or parsing mkv files for playback. A denial of service vulnerability exists in the UpdateDataSize function in ebmlmaster.c in libebml2 2012-08-26 and prior versions of Libebml2. With a specially crafted mkv file, a remote attacker can exploit...

libebml2 'EBML_IntegerValue' Function Denial of Service Vulnerability

libebml2 is an open source EBML parser written in C . A security vulnerability exists in the 'EBMLIntegerValue' function in the ebmlnumber.c file in libebml2 2012-08-26 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with the help of a specially...

libebml2 ReadData Function Denial of Service Vulnerability

libebml2 is a mkv file parsing library for analyzing or parsing mkv files for playback. A denial of service vulnerability exists in the ReadData function in ebmlstring.c in Libebml2 2012-08-26 and earlier versions. With a specially crafted mkv file, a remote attacker can exploit this vulnerabilit...

libebml2 'EBML_BufferToID' function denial of service vulnerability

libebml2 is an open source EBML parser written in C . A security vulnerability exists in the 'EBMLBufferToID' function in the ebmlelement.c file in libebml2 2012-08-26 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference an...

mkclean Node_ValidatePtr Function Denial of Service Vulnerability

mkclean is a command line tool for cleaning and optimizing muxed Matroska .mkv / .mka / .mks / .mk3d and WebM .webm / .weba files. A denial of service vulnerability exists in the NodeValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9. Via a specially crafted mkv file, a remote...

Memory Leaks Through Double-free

FFmpeg is vulnerable to memory leaks. These occur through a double-free vulnerability cause when parsing an AVI file to a MKV file using the ffvhuff decoder...

Memory Corruption Vulnerability in Storm Video 5 PC Client (CNVD-2017-35535)

Storm Video 5 is a video player from Beijing Storm Technology Co. A memory corruption vulnerability exists in the avformatlav57 module of the Storm Video 5 PC client when opening specific mkv files when copying strings, which can be exploited by an attacker to cause a denial of service or code...

Memory Corruption Vulnerability in Lovecraft Universal Player (CNVD-2017-35554)

Aiki Universal Player is a local video software that can also play image files and supports almost all major video formats. A memory corruption vulnerability exists in Aiki Universal Player when parsing the special envoy mkv file format, which can be exploited by attackers to cause a...